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DETAILED ACTION 

Applicant's election with traverse of group II (claims 3-14) in the reply filed 
on 3/22/2007 is acknowledged. The traversal is on the ground(s) that the 
examiner has not cited any references to show necessity for requiring restriction 
and that there is no undue burden to search the multiple groups of inventions 
presented. This is not found persuasive because there is no requirement that 
references be cited which shows necessity for restriction. Also, because the 
claims are drawn to distinct inventions, different search strategies would be 
required to search each invention. Multiple searches for each group of invention 
would be undue burden. 

The requirement is still deemed proper and is therefore made FINAL. 
Claims 3-14 were examined. Claims 1-2 and 15-48 are withdrawn from 
consideration. 

Information Disclosure Statement 

The foreign patent documents listed in the IDS submitted on 2/2/2004 
have been considered. The US patent documents listed were not considered, 
because no US patent publication exists with the document numbers listed in the 
IDS. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 

all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 102 of this title, if the differences between the subject matter sought to 
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be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

Claims 3-7 and 9-1 1 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Copeland III (US 2002/0144156) in view of Hasuo et al (US 
5,367,704). 
Claim 3: 

Copeland discloses: 

1. Identifying whether a context, i.e. flow, is a reliable context or an unreliable 
context, wherein the context issues a command to perform a specific 
operation (paragraphs 20, 82, and 85). The cited sections disclose 
program flows being analyzed to identify whether or not they are 
authorized. Note that the program flows issues various command, such 
as view email stored in an email seiver as discussed in paragraph 82. 

2. Determining that the specific operation is not permitted when the context 
is an unreliable context (paragraphs 85-86). The cited paragraph 
determined that chat and viewing webpage is not permitted because the 
flows are of types not allowed, i.e. they are unreliable. 

3. Outputting an error message, i.e. alarm, when the specific operation is not 
permitted (paragraphs 85-86). 

Copeland does not explicitly disclose not performing the specific operation 
when the specific operation is not permitted. However, the limitation is disclosed 
by Hasuo (col 3, lines 12-48). At the time applicant's invention was made, it 
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would have been obvious to one of ordinary skill in the art to modify Copeland's 
invention such that if a specific operation is not permitted, not performing the 
specific operation. One skilled would have been motivated to do so because it is 
standard practice in the art to prevent unauthorized execution of operations that 
has been banned or not allowed in a computer or network. 
Claim 4: 

Hasuo further discloses wherein the issuing of the command comprises 
identifying a reliability of the context based on a flag of a memory into which the 
context that issues the command is loaded (col 3, lines 12-48). Note that Hasuo 
actually uses two flags. One is the name of the program in an allowed program 
list and the other is a limit value which indicates when a program and its 
corresponding commands are allowed execution. 
Claim 5: 

Hasuo discloses not performing an unauthorized operation (col 3, lines 12- 
48) and Copeland discloses outputting the error message (paragraphs 85-86). 
However, neither reference explicitly discloses not performing a preload when 
the context commands to preload a markup document to secure seamless 
reproduction of AV data. However, the examiner take official notice that 
performing a preload when the context commands to preload a markup 
document to secure seamless reproduction of AV data was well known in the art 
at the time applicant's invention was made. The limitation reads on buffering AV 
data that is played in a browser. In light of Hasuo's teachings of not performing 
an unauthorized operation, it would have been obvious tc> one skilled in the art to 
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also not perform the operation of preloading a markup document if the context is 
not authorized. One skilled would have been motivated to do so because not 
preloading when the context is not authorized would prevent valuable bandwidth 
from being wasted. Note Copeland recognized wasting of bandwidth as a 
concern (paragraph 86). Also, as per Hasuo's teachings, all unauthorized 
program execution and commands are to be prohibited. 
Claim 6: 

Hasuo discloses not performing an unauthorized operation (col 3, lines 12- 
48) and Copeland discloses outputting the error message (paragraphs 85-86). 
However, neither reference explicitly discloses not performing a deletion when 
the context commands to delete data that is preloaded in a memory of the 
network accessible apparatus. However, official notice is taken that context 
commands to delete data that is preloaded in memory of a network accessible 
apparatus was well known in the art at the time applicant's invention was made, 
i.e. deleting data from network storage. In light of Hasuo's teachings of not 
performing an unauthorized operation, it would have been obvious to one skilled 
in the art to also not perform the operation of deleting data that is preloaded in a 
memory of the network accessible apparatus when the context is unauthorized. 
One skilled would have been motivated to do so because it would prevent a 
hacker from deleting information from a server that they are not authorized to 
access. Also, as per Hasuo's teachings, all unauthorized program execution and 
commands are to be prohibited. 
Claim 7: 
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Hasuo discloses not performing an unauthorized operation (col 3, lines 12- 
48) and Copeland discloses outputting the error message (paragraphs 85-86). 
Copeland also discloses trying to prevent unauthorized accessing of a web page 
(paragraph 86), thus together, Copeland and Hasuo renders obvious the 
limitation of not performing access when the context commands to access data 
that is recorded on a disk mounted in the network accessible apparatus and 
outputting the error message. Note that a web page is recorded on a web 
server and viewing the web page means accessing it. As per Hasuo's teachings, 
all unauthorized program execution and commands are to be prohibited. 
Claim 9: 

Hasuo discloses not performing an unauthorized operation (col 3, lines 12- 
48) and Copeland discloses outputting the error message (paragraphs 85-86). 
However, neither reference explicitly discloses not performing access when the 
context commands to access cookies that are stored in the network accessible 
apparatus by another context. However, official notice is taken that cookies 
stored on web servers were well known in the art at the time applicant's invention 
was made as well as commands to access the cookies stored on the web 
Servers. At the time applicant's invention was made, it would have been obvious 
to not perform cookie access when a cookie access command was issued by an 
unauthorized context/application. One skilled would have been motivated to do 
so because as per Hasuo's teachings, all unauthorized program execution and 
commands are to be prohibited. 
Claim 10: 
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Hasuo discloses not performing an unauthorized operation (col 3, lines 12- 
48) and Copeland discloses outputting the error message (paragraphs 85-86). 
Copeland also discloses attempting to perform access when the context 
commands to access another context that is operated in the network accessible 
apparatus (paragraphs 82 and 86). Together, the teachings of Copeland and 
Hasuo render obvious the limitation of not performing access when the context 
commands to access another context that is operated in the network accessible 
apparatus and outputting the error message. 
Claim 11: 

Hasuo discloses not performing an unauthorized operation (col 3, lines 12- 
48) and Copeland discloses outputting the error message (paragraphs 85-86). 
However, neither reference explicitly discloses not performing control when the 
context commands to control a reproducing engine, which reproduces AV data 
recorded on a disk mounted in the network accessible apparatus. However, 
official notice is taken that performing control when context commands to control 
a reproducing engine, which reproduces AV data recorded on a disk mounted in 
the network accessible apparatus, i.e. replicating AV data to an optical drive, was 
well known in the art at the time applicant's invention was made. It would have 
been obvious to one of ordinary skill in the art to further modify Copeland's 
invention according to the limitations recited in claim 1 1 because as per Hasuo's 
teachings, all unauthorized program execution and commands are to be 
prohibited. 
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Claim 8 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Copeland III (US 2002/0144156) in view of Hasuo et al (US 5,367,704) in further 
view of Goodwin, III et al (US 2002/006591). 
Claim 8: 

Hasuo discloses not performing an unauthorized operation (col 3, lines 12- 
48) and Copeland discloses outputting the error message (paragraphs 85-86). 
Neither reference explicitly discloses not performing access with the context to 
access another frame through a frame. However, accessing a frame through 
another frame, i.e. accessing a webpage from another webpage, was well known 
in the art at the time applicant's invention was made as disclosed by Goodwin 
(paragraph 37). 

At the time applicant's invention was made, it would have been obvious to 
one skilled in the art to further modify Copeland's invention according to the 
limitations recited in claim 8. One skilled would have been motivated to do so 
because as per Hasuo's teachings, all unauthorized program execution and 
commands are to be prohibited. 

Claims 12-14 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Copeland III (US 2002/0144156) in view of Humes (US 5,996,011). 
Claim 12: 
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Copeland discloses: 

1 . Issuing a command by a reliable context to read a content (paragraph 82). 
Note that a command is issued by an authorized flow to read email stored 
in a server 

2. Identifying whether the command is a reliable request or an unreliable 
request based on syntax of the command (paragraphs 1 16 and 118). The 
packet header of the flow is analyzed to identify if the packet carries a 
reliable or unreliable request. A reliable request would have proper 
header syntax. 

3. Generating a reliable context corresponding to the content when the 
command is a reliable request (paragraph 82). Since the computer is 
authorized to utilized SMTP to access email, no alarm is generated. One 
can reasonably assume then that access to the email is allowed and a 
reliable context is generated which allows the user to view the email. 

Copeland does not explicitly disclose generating an unreliable context 
when the command is the unreliable request. However, the limitation is 
disclosed by Humes (col 3, lines 14-22). The cited portion of Humes discloses a 
"forbidden" page being sent to the user to indicate that the request for the 
particular page was unreliable, i.e. unauthorized. Because the "forbidden" page 
was not the page the user requested, the context, i.e. page, generated is 
unreliable. At the time applicant's invention was made, it would have been 
obvious to one of ordinary skill in the art to modify Copeland's invention 
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according to the limitations recited in claim 12 in light of Humes's teachings. One 
skilled would have been motivated to do so because generating an unreliable 
context would alert the user that they are performing a function that they have not 
yet been authorized to do so. 
Claim 13: 

Copeland further disclose wherein the content corresponding to the 
reliable context is recorded on a disk mounted in the network accessible 
apparatus, i.e. email server (paragraph 82). 
Claim 14: 

Copeland further discloses wherein the command recorded as a "http://" 
request in the content corresponding to the reliable context is determined as the 
reliable request, and the command recorded as an "httpu://" request in the 
content corresponding to the reliable context is determined as the unreliable 
request (Fig 1, Host data table 166). 

Note that an http command is a command over TCP. Table 166 shows 
the host is authorized to act as a server accepting http commands over TCP as a 
server. However, there is no indication in the table which indicates that http 
commands are allowable over UDP. Http commands over UDP are httpu 
requests. Thus the limitation further recited in claim 14 is disclosed by Copeland. 

Conclusion 

Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Ponnoreay Pich whose telephone number is 
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571-272-7962. The examiner can normally be reached on 9:00am-4:30pm Mon- 
Thurs. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached on 571-272-3859. The fax phone 
number for the organization where this application or proceeding is assigned is 
571-273-8300. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). If you would like assistance from a USPTO Customer Service 
Representative or access to the automated information system, call 800-786- 
9199 (IN USA OR CANADA) or 571-272-1000. 
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